samba - Apr 2004 - cannot change user password with CTRL-ALT-DEL

I've been running samba (currently 2.2.3a-13 for Debian) as a PDC with W2k 
clients for over two years. The system was up and running quite well for a 
long time. A couple of days ago, I installed the following MS-patches:

MS04-011
MS04-012
MS04-013
MS04-014
MS02-011

Now when users try to change their password from the w2k clients using 
CTRL-ALT-DEL, a popup window appears saying: "password change failed, the 
domain <xxx> is not available". But the fact is that the password has
been
succesfully changed (i.e. the popup should state: "password succesfully 
changed."). When users log out and login again, the login obviusly fails, 
since users use their old passwords instead of the new ones...

I wonder whether I am the only one who is experiencing this problem and 
whether somebody knows how to solve this problem.

I can send the logs (nmbd.log, smbd.log and log.machinename) if somebody 
needs them.

Thanks,

Angel Chiou

I have the exact same problem. I have not had time to debug the problem,
but am very interrested in resolving the problem.

|-----Original Message-----
|From: samba-bounces+samba=lillerud.no@lists.samba.org [mailto:samba-
|bounces+samba=lillerud.no@lists.samba.org] On Behalf Of Angel Chiou
|Sent: 19. april 2004 22:14
|To: samba@lists.samba.org
|Subject: [Samba] cannot change user password with CTRL-ALT-DEL
|
|I've been running samba (currently 2.2.3a-13 for Debian) as a PDC with
W2k
|clients for over two years. The system was up and running quite well
for a
|long time. A couple of days ago, I installed the following MS-patches:
|
|MS04-011
|MS04-012
|MS04-013
|MS04-014
|MS02-011
|
|Now when users try to change their password from the w2k clients using
|CTRL-ALT-DEL, a popup window appears saying: "password change failed,
the
|domain <xxx> is not available". But the fact is that the password
has
been
|succesfully changed (i.e. the popup should state: "password succesfully
|changed."). When users log out and login again, the login obviusly
fails,
|since users use their old passwords instead of the new ones...
|
|I wonder whether I am the only one who is experiencing this problem and
|whether somebody knows how to solve this problem.
|
|I can send the logs (nmbd.log, smbd.log and log.machinename) if
somebody
|needs them.
|
|Thanks,
|
|Angel Chiou
|
|--
|To unsubscribe from this list go to the following URL and read the
|instructions:  http://lists.samba.org/mailman/listinfo/samba

>I have the exact same problem. I have not had time to debug 
>the problem,
>but am very interrested in resolving the problem.
Ditto here, I will be looking into this.

Yet another anti-Samba upgrade from your friends at
Microsoft.

Donning tin-foil hat, of course.

--J(K)

We have recently upgraded to samba3.0.2a.  It runs as a PDC with WINS
support.  For the past three years, we have used smb_auth within squid for
basic authentication for our students.

Is it now possible to use NTLM authentication directly to squid?  From
everything that I've read, it seems to me that a windows active directory
server and winbindd are needed to do NTLM authentication.

Mark

On Mon, Apr 19, 2004 at 10:13:39PM +0200, Angel Chiou
wrote:
> I've been running samba (currently 2.2.3a-13 for Debian) as a PDC with
W2k
> clients for over two years. The system was up and running quite well for a 
> long time. A couple of days ago, I installed the following MS-patches:
> 
> MS04-011
> MS04-012
> MS04-013
> MS04-014
> MS02-011
> 
> Now when users try to change their password from the w2k clients using 
> CTRL-ALT-DEL, a popup window appears saying: "password change failed,
the
> domain <xxx> is not available". But the fact is that the
password has been
> succesfully changed (i.e. the popup should state: "password
succesfully
> changed."). When users log out and login again, the login obviusly
fails,
> since users use their old passwords instead of the new ones...
> 
> I wonder whether I am the only one who is experiencing this problem and 
> whether somebody knows how to solve this problem.
> 
> I can send the logs (nmbd.log, smbd.log and log.machinename) if somebody 
> needs them.
Let me try and reproduce this first, thanks for the heads-up.
I'll be in touch if we can't reproduce it.

Cheers,

	Jeremy.

it appears that MS04-012 (828741) is the problem... (at least on XP Pro)

I first removed MS04-011 (835732) and no luck, but then removed MS04-012 
and get a successful password change message.

On Mon, May 10, 2004 at 12:56:29AM -0500, Russ Jury
wrote:
> it appears that MS04-012 (828741) is the problem... (at least on XP Pro)
> 
> I first removed MS04-011 (835732) and no luck, but then removed MS04-012 
> and get a successful password change message.
We just fixed this in 3.0.4 and a newly released 2.2.9.

Jeremy.